[ GLSA 201604-05 ] Wireshark

[GLSA]

Gentoo Linux Security Advisory

Title: Wireshark: Multiple vulnerabilities (GLSA 201604-05)
Severity: normal
Exploitable: local, remote
Date: April 26, 2016
Bug(s): #570564, #575780
ID: 201604-05

Synopsis

Multiple vulnerabilities have been found in Wireshark, allowing
local attackers to escalate privileges and remote attackers to cause Denial
of Service.


Background

Wireshark is a network protocol analyzer formerly known as ethereal.

Affected Packages

Package: net-analyzer/wireshark
Vulnerable: < 2.0.2
Unaffected: >= 2.0.2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Wireshark. Please
review the CVE identifiers referenced below for details.


Impact

Remote attackers could cause Denial of Service and local attackers could
escalate privileges.


Workaround

There is no known workaround at this time.

Resolution

All Wireshark users should upgrade to the latest version: